conntrack

Documentation

Index

• Constants
• func ClearEntriesForIP(execer exec.Interface, ip string, protocol v1.Protocol) error
• func ClearEntriesForNAT(execer exec.Interface, origin, dest string, protocol v1.Protocol) error
• func ClearEntriesForPort(execer exec.Interface, port int, isIPv6 bool, protocol v1.Protocol) error
• func ClearEntriesForPortNAT(execer exec.Interface, dest string, port int, protocol v1.Protocol) error
• func Exec(execer exec.Interface, parameters ...string) error
• func Exists(execer exec.Interface) bool
• func IsClearConntrackNeeded(proto v1.Protocol) bool

Constants

const NoConnectionToDelete = "0 flow entries have been deleted"

NoConnectionToDelete is the error string returned by conntrack when no matching connections are found

Functions

func ClearEntriesForIP

func ClearEntriesForIP(execer exec.Interface, ip string, protocol v1.Protocol) error

ClearEntriesForIP uses the conntrack tool to delete the conntrack entries for the UDP connections specified by the given service IP

func ClearEntriesForNAT

func ClearEntriesForNAT(execer exec.Interface, origin, dest string, protocol v1.Protocol) error

ClearEntriesForNAT uses the conntrack tool to delete the conntrack entries for connections specified by the {origin, dest} IP pair.

func ClearEntriesForPort

func ClearEntriesForPort(execer exec.Interface, port int, isIPv6 bool, protocol v1.Protocol) error

ClearEntriesForPort uses the conntrack tool to delete the conntrack entries for connections specified by the port. When a packet arrives, it will not go through NAT table again, because it is not "the first" packet. The solution is clearing the conntrack. Known issues: https://github.com/docker/docker/issues/8795 https://github.com/kubernetes/kubernetes/issues/31983

func ClearEntriesForPortNAT

func ClearEntriesForPortNAT(execer exec.Interface, dest string, port int, protocol v1.Protocol) error

ClearEntriesForPortNAT uses the conntrack tool to delete the contrack entries for connections specified by the {dest IP, port} pair. Known issue: https://github.com/kubernetes/kubernetes/issues/59368

func Exec

func Exec(execer exec.Interface, parameters ...string) error

Exec executes the conntrack tool using the given parameters

func Exists

func Exists(execer exec.Interface) bool

Exists returns true if conntrack binary is installed.

func IsClearConntrackNeeded

func IsClearConntrackNeeded(proto v1.Protocol) bool

IsClearConntrackNeeded returns true if protocol requires conntrack cleanup for the stale connections